COMPONENT
Onboard computer
PaperForthcoming. Table 3 and the detection priorities.
Broadest set of high ratings. It handles information for several subsystems, so a compromise can spread past the first function that was hit.
High in the table: Malware, Spoofing, Replay, Tampering, Firmware compromise, Insider threat.
Watch system and software behavior, communication activity, and firmware integrity. The paper does not assign this component to onboard or ground alone.
- MalwareHigh
Abnormal process, resource use, or software behavior.
- SpoofingHigh
No observable given for this pair.
- ReplayHigh
No observable given for this pair.
- TamperingHigh
Unexpected configuration, or a message or firmware integrity change.
No observable given for this pair.
Integrity violation or an unexpected firmware state.
- Supply-chain attackMedium
No observable given for this pair.
- Insider threatHigh
Abnormal privileged activity or an unauthorized command.